cancel
Showing results for 
Search instead for 
Did you mean: 
dragonknight
Level 9

/var/log/message file very big.

Jump to solution

Dear all,

I'm using McAfee web gateway 7.5.2.6. I have problem with it, /var/log/message file very big, It > 4GB.

1) What log is stored in the file? Please help me to explain about it.

2) I realize MWG will remove automatically /var/log/message file if the file > in 30 days. I want MWG will remove automatically it only in 2 days, not in 30 days. Please guide me to configCapture.PNG

. Please me this case.

Thanks,

DK.

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: /var/log/message file very big.

Jump to solution

Hey DK,

What does your logging rule look like?

The exclusion part of your config (daemon.!=info) will only work if your rule is set to level 6.

I'm guessing if you looked inside the file, you'd see access log data.

Check out this guide for more info:

Best Regards,

Jon

0 Kudos
4 Replies
McAfee Employee

Re: /var/log/message file very big.

Jump to solution

Hey DK,

What does your logging rule look like?

The exclusion part of your config (daemon.!=info) will only work if your rule is set to level 6.

I'm guessing if you looked inside the file, you'd see access log data.

Check out this guide for more info:

Best Regards,

Jon

0 Kudos
dragonknight
Level 9

Re: /var/log/message file very big.

Jump to solution

Dear Jon scholten,

Thank you for your help.

I config level 3 in logging rule. So in syslog, how must I config to don't write to disk of MWG?

Thanks,

DK

0 Kudos
McAfee Employee

Re: /var/log/message file very big.

Jump to solution

Hi DK,

You can update the logging to use 6 (info), or update the rsyslog line to be daemon.!=error instead of daemon.!=info.

Best Regards,

Jon

0 Kudos
dragonknight
Level 9

Re: /var/log/message file very big.

Jump to solution

Hi jon,

Thank you very much! The log don't write to disk of MWG.

Thanks,

DK

0 Kudos